In Apache Maven maven-shared-utils prior to version 3.3.3, the Commandline class can emit double-quoted strings without proper escaping, allowing shell injection attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade apache-commons-cliUpgrade plexus-sec-dispatcherUpgrade maven-openjdk17Upgrade apache-commons-loggingUpgrade maven-libUpgrade sisuUpgrade hawtjni-runtimeUpgrade jansiUpgrade apache-commons-codecUpgrade sisu-plexusUpgrade maven-resolver-apiUpgrade maven-wagonUpgrade apache-commons-lang3Upgrade cdi-apiUpgrade slf4jUpgrade jcl-over-slf4jUpgrade plexus-cipherUpgrade maven-openjdk11Upgrade maven-openjdk8Upgrade maven-resolver-connector-basicUpgrade plexus-containers-component-annotationsUpgrade apache-commons-ioUpgrade maven-wagon-fileUpgrade jsr-305Upgrade plexus-utilsUpgrade atinjectUpgrade sisu-injectUpgrade httpcomponents-coreUpgrade maven-resolver-transport-wagonUpgrade maven-resolver-implUpgrade glassfish-el-apiUpgrade google-guiceUpgrade httpcomponents-clientUpgrade maven-resolver-spiUpgrade plexus-classworldsUpgrade maven-resolverUpgrade maven-resolver-utilUpgrade maven-wagon-http-sharedUpgrade mavenUpgrade geronimo-annotationUpgrade maven-shared-utilsUpgrade guavaUpgrade jboss-interceptors-1.2-apiUpgrade maven-wagon-provider-apiUpgrade jsoupUpgrade jansi-nativeUpgrade plexus-interpolationUpgrade maven-wagon-httpUpgrade aopallianceUpgrade guava20 | Jun 7, 2022 | May 23, 2022 |
| Amazon Linux Ami 2 | — | Upgrade maven-shared-utils-javadocUpgrade maven-shared-utils | Jul 4, 2022 | May 23, 2022 |
| Centos_linux | — | Upgrade mavenUpgrade apache-commons-cliUpgrade jsoupUpgrade apache-commons-loggingUpgrade apache-commons-lang3Upgrade jcl-over-slf4jUpgrade maven-resolver-apiUpgrade maven-resolver-spiUpgrade plexus-interpolationUpgrade maven-libUpgrade maven-resolverUpgrade apache-commons-ioUpgrade maven-openjdk8Upgrade plexus-containers-component-annotationsUpgrade jansi-nativeUpgrade sisu-injectUpgrade httpcomponents-coreUpgrade maven-resolver-connector-basicUpgrade google-guiceUpgrade maven-openjdk11Upgrade jsr-305Upgrade atinjectUpgrade maven-wagon-httpUpgrade plexus-classworldsUpgrade geronimo-annotationUpgrade hawtjni-runtimeUpgrade guava20Upgrade slf4jUpgrade sisuUpgrade plexus-utilsUpgrade guavaUpgrade apache-commons-codecUpgrade plexus-sec-dispatcherUpgrade maven-resolver-transport-wagonUpgrade httpcomponents-clientUpgrade jansiUpgrade plexus-cipherUpgrade aopallianceUpgrade maven-resolver-utilUpgrade maven-resolver-implUpgrade sisu-plexusUpgrade maven-wagonUpgrade maven-shared-utils-javadocUpgrade maven-openjdk17Upgrade cdi-apiUpgrade glassfish-el-apiUpgrade maven-wagon-fileUpgrade maven-wagon-provider-apiUpgrade maven-wagon-http-sharedUpgrade jboss-interceptors-1.2-apiUpgrade maven-shared-utils | May 2, 2022 | Apr 26, 2022 |
| Debian | — | Upgrade maven-shared-utils | Jun 28, 2022 | May 23, 2022 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 35904051 for version 14.1.1.0.0. | Oct 19, 2023 | May 23, 2022 |
| Oracle_linux | — | Upgrade plexus-containers-component-annotationsUpgrade sisu-injectUpgrade maven-wagon-fileUpgrade apache-commons-ioUpgrade glassfish-el-apiUpgrade maven-resolver-transport-wagonUpgrade jcl-over-slf4jUpgrade maven-resolver-connector-basicUpgrade sisuUpgrade hawtjni-runtimeUpgrade maven-wagonUpgrade plexus-cipherUpgrade cdi-apiUpgrade maven-libUpgrade maven-wagon-provider-apiUpgrade jansiUpgrade maven-resolver-implUpgrade httpcomponents-coreUpgrade plexus-sec-dispatcherUpgrade apache-commons-codecUpgrade plexus-utilsUpgrade maven-shared-utils-javadocUpgrade maven-openjdk17Upgrade apache-commons-lang3Upgrade jboss-interceptors-1.2-apiUpgrade slf4jUpgrade maven-openjdk11Upgrade jsr-305Upgrade guava20Upgrade maven-wagon-httpUpgrade jsoupUpgrade maven-resolver-apiUpgrade maven-wagon-http-sharedUpgrade mavenUpgrade sisu-plexusUpgrade maven-resolverUpgrade plexus-classworldsUpgrade google-guiceUpgrade geronimo-annotationUpgrade maven-shared-utilsUpgrade atinjectUpgrade plexus-interpolationUpgrade maven-resolver-spiUpgrade maven-resolver-utilUpgrade maven-openjdk8Upgrade httpcomponents-clientUpgrade guavaUpgrade apache-commons-loggingUpgrade apache-commons-cliUpgrade jansi-nativeUpgrade aopalliance | Apr 30, 2022 | May 29, 2020 |
| Redhat Openshift | — | Upgrade jenkins-2-plugins | Jan 5, 2023 | May 29, 2020 |
| Redhat_linux | — | Upgrade sisu-plexusUpgrade maven-wagon-http-sharedUpgrade apache-commons-lang3Upgrade jsr-305Upgrade maven-openjdk17Upgrade geronimo-annotationUpgrade maven-wagon-fileUpgrade plexus-classworldsUpgrade sisuUpgrade maven-openjdk11Upgrade maven-resolver-connector-basicUpgrade maven-openjdk8Upgrade maven-wagonUpgrade hawtjni-runtimeUpgrade plexus-sec-dispatcherUpgrade maven-libUpgrade guavaUpgrade maven-resolver-apiUpgrade apache-commons-ioUpgrade plexus-cipherUpgrade maven-shared-utils-javadocUpgrade cdi-apiUpgrade maven-resolver-implUpgrade glassfish-el-apiUpgrade plexus-interpolationUpgrade maven-resolver-utilUpgrade mavenUpgrade jsoupUpgrade jcl-over-slf4jUpgrade google-guiceUpgrade atinjectUpgrade aopallianceUpgrade plexus-utilsUpgrade maven-resolver-transport-wagonUpgrade apache-commons-cliUpgrade jboss-interceptors-1.2-apiUpgrade jansiUpgrade httpcomponents-coreUpgrade maven-resolverUpgrade apache-commons-codecUpgrade httpcomponents-clientUpgrade guava20Upgrade maven-wagon-httpUpgrade maven-wagon-provider-apiUpgrade plexus-containers-component-annotationsUpgrade slf4jUpgrade apache-commons-loggingUpgrade sisu-injectUpgrade maven-resolver-spiUpgrade maven-shared-utilsUpgrade jansi-native | May 2, 2022 | Apr 26, 2022 |
| Rocky_linux | — | Upgrade jansi-native | Mar 12, 2024 | May 23, 2022 |
| Suse | — | Upgrade maven-plugin-tools-annotationsUpgrade maven-resolver-spiUpgrade maven-shared-io-javadocUpgrade maven-compiler-plugin-bootstrapUpgrade bnd-maven-plugin-javadocUpgrade maven-failsafe-plugin-bootstrapUpgrade maven-javadocUpgrade maven-compiler-plugin-javadocUpgrade maven-surefire-provider-junitUpgrade maven-invokerUpgrade maven-resolver-apiUpgrade maven-invoker-javadocUpgrade maven-surefire-javadocUpgrade maven-resolver-test-utilUpgrade string-template-maven-plugin-javadocUpgrade maven-doxia-sitetoolsUpgrade maven-remote-resources-plugin-javadocUpgrade maven-resolver-connector-basicUpgrade maven-surefire-provider-junit5Upgrade maven-resources-plugin-bootstrapUpgrade maven-wagon-ftpUpgrade maven-source-plugin-javadocUpgrade os-maven-plugin-javadocUpgrade maven-jar-plugin-javadocUpgrade maven-doxia-module-xdocUpgrade maven-surefire-report-plugin-bootstrapUpgrade maven-enforcer-javadocUpgrade maven-plugin-tools-javaUpgrade maven-artifact-resolver-javadocUpgrade maven-test-toolsUpgrade maven-plugin-tools-modelUpgrade maven-surefire-provider-testngUpgrade gmavenplus-plugin-javadocUpgrade maven-plugin-registryUpgrade maven-wagon-httpUpgrade maven-jar-plugin-bootstrapUpgrade antlr4-maven-pluginUpgrade tesla-polyglot-maven-pluginUpgrade maven-wagon-provider-apiUpgrade maven-doxia-module-fmlUpgrade maven-plugin-tools-beanshellUpgrade maven-script-beanshellUpgrade maven-settingsUpgrade hawtjni-maven-pluginUpgrade maven-doxia-module-latexUpgrade mavenUpgrade maven-install-pluginUpgrade maven-compiler-pluginUpgrade maven-verifierUpgrade xml-maven-plugin-javadocUpgrade maven-mappingUpgrade maven-doxia-test-docsUpgrade maven-wagon-ssh-commonUpgrade maven-wagon-sshUpgrade maven-plugin-pluginUpgrade maven-surefire-provider-junit5-javadocUpgrade bnd-maven-pluginUpgrade maven-toolchainUpgrade maven-enforcer-rulesUpgrade maven-surefire-plugin-bootstrapUpgrade maven-surefire-report-pluginUpgrade maven-shared-utils-javadocUpgrade maven-plugin-tools-generatorsUpgrade maven-javadoc-plugin-bootstrapUpgrade maven-verifier-javadocUpgrade maven-resolver-javadocUpgrade maven-dependency-analyzer-javadocUpgrade maven-doxia-module-confluenceUpgrade modello-maven-plugin-javadocUpgrade maven-resources-plugin-javadocUpgrade maven-filtering-javadocUpgrade maven-filteringUpgrade maven-artifact-transferUpgrade maven-resolverUpgrade maven-resolver-named-locksUpgrade maven-plugin-descriptorUpgrade maven-script-antUpgrade maven-artifactUpgrade maven-libUpgrade maven-artifact-resolverUpgrade maven-resolver-transport-fileUpgrade maven-monitorUpgrade maven2-javadocUpgrade maven-dependency-treeUpgrade maven-plugin-build-helperUpgrade maven-antrun-pluginUpgrade hawtjni-maven-plugin-javadocUpgrade maven-doxia-module-xhtmlUpgrade maven-doxia-module-xhtml5Upgrade maven-dependency-analyzerUpgrade exec-maven-pluginUpgrade maven-doxia-module-docbook-simpleUpgrade maven-doxia-module-rtfUpgrade maven-archiverUpgrade paranamer-maven-pluginUpgrade maven-plugin-build-helper-javadocUpgrade maven-doxia-coreUpgrade maven-plugin-tools-javadocUpgrade maven-modelUpgrade maven-dependency-pluginUpgrade javacc-maven-pluginUpgrade maven-mapping-javadocUpgrade maven-wagon-fileUpgrade maven-plugin-tools-apiUpgrade maven-shared-ioUpgrade maven-surefire-report-parserUpgrade maven-enforcer-pluginUpgrade maven-resolver-implUpgrade maven-resolver-utilUpgrade maven-profileUpgrade maven-archiver-javadocUpgrade maven-projectUpgrade maven-shared-incremental-javadocUpgrade maven-plugin-bundleUpgrade maven-doxia-module-twikiUpgrade maven-common-artifact-filters-javadocUpgrade maven-artifact-transfer-javadocUpgrade maven-failsafe-pluginUpgrade maven-plugin-testing-toolsUpgrade maven-assembly-pluginUpgrade maven-plugin-bundle-javadocUpgrade maven-wagon-http-lightweightUpgrade maven-doxia-sink-apiUpgrade maven-wagon-http-sharedUpgrade maven-localUpgrade maven-assembly-plugin-javadocUpgrade maven-doxia-logging-apiUpgrade maven-clean-pluginUpgrade maven-enforcer-apiUpgrade maven-enforcerUpgrade javacc-maven-plugin-javadocUpgrade maven-javadoc-pluginUpgrade modello-maven-pluginUpgrade string-template-maven-pluginUpgrade maven-reporting-api-javadocUpgrade maven-surefire-plugins-javadocUpgrade maven-plugin-testing-harnessUpgrade maven-doxia-javadocUpgrade maven-dependency-plugin-javadocUpgrade xml-maven-pluginUpgrade maven-plugin-tools-antUpgrade maven-remote-resources-pluginUpgrade spec-version-maven-plugin-javadocUpgrade maven-javadoc-plugin-javadocUpgrade maven-clean-plugin-javadocUpgrade maven-wagon-ssh-externalUpgrade maven-plugin-annotationsUpgrade maven-resolver-transport-classpathUpgrade maven-plugin-testingUpgrade maven-file-management-javadocUpgrade maven-resolver-transport-wagonUpgrade maven-doxia-module-foUpgrade exec-maven-plugin-javadocUpgrade maven-shared-utilsUpgrade maven-file-managementUpgrade maven-common-artifact-filtersUpgrade maven-artifact-managerUpgrade maven-doxia-sitetools-javadocUpgrade gmavenplus-pluginUpgrade maven-resources-pluginUpgrade maven-plugin-plugin-bootstrapUpgrade maven-dependency-tree-javadocUpgrade maven-wagon-javadocUpgrade maven-install-plugin-javadocUpgrade maven-surefire-pluginUpgrade maven-reporting-apiUpgrade maven-plugin-testing-javadocUpgrade maven-doxia-module-aptUpgrade maven-plugin-plugin-javadocUpgrade maven-antrun-plugin-javadocUpgrade maven-jar-pluginUpgrade os-maven-pluginUpgrade maven-shared-incrementalUpgrade maven-source-pluginUpgrade maven-surefireUpgrade spec-version-maven-pluginUpgrade maven-resolver-transport-http | Mar 20, 2023 | May 23, 2022 |
| Ubuntu | — | Upgrade libmaven-shared-utils-javaUpgrade libmaven-shared-utils-java (Ubuntu Pro) | Apr 12, 2024 | May 23, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub